This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: dBRaeSDWdLPzchdEGp+zayPqHu97NHn0ZQYImrBKz5Y=
Subject key identifier: 54:30:18:6C:AC:49:C6:CB:A2:A3:E7:C0:78:D1:2A:35:D1:DD:01:82
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 019C4246AF5B4D6982830CB756E30C758B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 113F
Signing time: Mon 09 Feb 2026 12:00:54 +0000
Manifest this update: Mon 09 Feb 2026 12:00:54 +0000
Manifest next update: Tue 10 Feb 2026 12:00:54 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: LLwVINA3DCPzMpBBDKQ7W3CA8HpmJsJ6lt8AE1e6AIY=)
2: kZWW_ntfYvdgmDKHXouZXpr8UMU.roa (hash: pybDSm/TxiDymAX06iB+SSYkpRn7EWk4DKtBzvh17SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:af:5b:4d:69:82:83:0c:b7:56:e3:0c:75:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Feb 9 12:00:54 2026 GMT
Not After : Feb 10 12:00:54 2026 GMT
Subject: CN=5430186cac49c6cba2a3e7c078d12a35d1dd0182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:9e:af:67:d2:c8:16:ff:5b:21:27:06:1d:
a1:e3:4f:ea:81:86:d3:76:5b:9c:54:38:95:18:48:
8e:ee:84:90:c6:7d:99:50:c9:f7:97:92:17:1f:aa:
00:4e:f9:69:fe:0a:ad:93:fa:4f:77:7a:27:bc:4a:
7a:37:05:c4:90:f6:25:34:d9:ea:6d:71:a2:ef:7f:
eb:39:9b:f4:7e:7f:ea:81:5f:a6:3d:76:31:b5:a6:
9c:18:26:83:a8:bb:91:bb:32:19:d8:18:b7:33:b8:
24:bb:84:0a:b1:7a:f2:e9:cd:5e:f2:96:5f:ed:d5:
cd:a9:20:02:fe:3c:02:56:01:0d:b4:8d:f6:8a:98:
39:dd:09:21:a7:60:60:fb:35:d6:48:89:be:06:92:
54:b7:5a:33:6b:32:5b:ea:2b:04:c4:cb:eb:2f:98:
b4:9f:93:02:53:ec:fd:7f:cf:e4:64:57:10:96:a5:
5d:3d:fd:ac:e7:e8:25:72:9a:e8:ce:10:9f:83:d0:
eb:32:f4:a5:5d:4c:a1:34:df:3a:65:d8:e9:75:e4:
6c:7f:b4:6d:0f:d3:29:e9:73:fd:2d:29:3b:17:6a:
a8:9a:fa:28:1b:43:6c:96:3c:39:9e:d3:c5:7b:a0:
96:46:eb:07:74:09:5b:b2:0f:a1:c3:9e:02:26:75:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:30:18:6C:AC:49:C6:CB:A2:A3:E7:C0:78:D1:2A:35:D1:DD:01:82
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c7:1d:5f:04:ed:fc:67:96:e8:e9:d6:9e:7b:39:2f:4d:ed:
f2:28:c4:a3:1b:ad:a5:bd:05:0f:1c:53:9c:39:e0:1b:ab:bf:
62:c9:0a:73:3c:f5:71:99:c9:55:e7:60:a1:84:3b:e4:5b:dd:
f3:f5:b1:ba:53:51:e4:3c:3e:63:c3:e4:01:b7:61:cc:1b:c5:
05:10:2b:9d:95:b4:ba:f9:6b:79:aa:b9:42:15:0b:43:6e:78:
32:03:04:d8:ae:d1:f8:22:50:16:a5:b2:53:66:2d:83:90:07:
bb:6b:d6:e3:8a:fe:9c:94:d1:a7:31:ff:e0:2f:07:bf:65:cf:
d5:27:7e:b2:8d:ae:3b:38:ad:e8:0c:ba:0c:f6:38:c0:aa:49:
08:7b:97:9b:b9:3b:5a:7b:ee:df:98:70:16:08:78:c6:5c:b4:
84:67:8b:70:f6:6d:1d:a8:df:7f:27:d2:1f:89:cc:b8:81:38:
07:32:24:e9:c7:77:29:90:67:ec:6e:11:54:8e:2d:e3:a8:61:
0d:98:71:96:43:2d:ff:0d:06:e7:55:33:1b:8b:b9:86:2b:a1:
94:1a:d1:72:4d:9a:8c:22:bd:fd:37:b0:a0:3b:40:83:8c:76:
e8:30:a2:0b:52:f8:7b:ac:ed:ac:4f:5d:1c:09:a2:f4:34:a0:
35:88:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:51 2026 by rpki-client